Changes to data protection laws ‘will give company bosses the shivers’